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Description 

Apollo's Doiiiaiii/OS " is the 
iiukistn "s first operating system 
that iiitetrrates the Network 
C^omptiting Sxstein" (NCS) 
architecture to provide a true 
distributed UNIX" operating 
svsleni. Built on advanced 
object-oriented technology, 
integrating the principles of 
abstraction and niodulai ity, 
Domain/OS represents a 
generational leap forward in 
application portaljilitv, operat- 
ing system functionality, and 
performance. It deli\ers indus- 
try standards plus ccjmpatible 
extensions— all on Apcjilos 
advanced workslalicjn platfoi ni. 






Software stijjport i epresents 
a substantial investment for end 
users, a|iplic ations developers, 
and computer \endors alike. 
The glowing importance of 
standards is tied directly to the 
indtistrys need to control soft- 
ware life-cycle costs and provide 
piograni and user portabilit\' 
in a heterogeneous computing 
enviionment. Domain/OS is 
the diiect result of Apollo's com- 
mitment to provide an opeiat- 
ing system that meets indirstry 
standai els. Domain/OS complies 
with Al'&l's System \' Interface 
Definition (SVID), the dc /ado 
L'NIX standard. Domain/OS is 
also on a migraticju path to 
become compliant with IEEE's 
POSIX, as soon as that standard 
is finalized. In addition, Apollo 



is ec]ually committed to provid- 
ing compatible extensions to 
those standards to meet users' 
advanced technological needs. 

Domain/OS is a single operat- 
ing sy.slem that provides users 
a choice of three operating 
environments — L'NIX System V 
Refease 3, 4.3HS1), and Aegis." 
With Domain/OS, users are able 
to configure nodes and networks 
to meet their specific function- 
ality, portability and perfor- 
mance needs. 

Highlights 

IVovides a choice of Opei ating 
en\ ironments for greater flexi- 
bilit) and configurability 
Implements the latest advanced 
functionality f lom Berkeley and 
AT&r 

Meets the SVID standard and 
provides a migration path to the 
POSIX standard 
I'rovides dynamic linking of 
global shared libraries to reduce 
object mcxlule size, imiiiove 
|3aging behavior, reduce disk 
space rec|uirements, and pro- 
vide the flexibility to change the 
implementation of a routine 
without having to relink pro- 
grams using that i oiitine 
Supports, tin (jugh demand 
paging acioss tlie network, the 
execution of programs on both 
disked and diskless workstations 
Integrates the Network Com- 
puting System architecture to 
ptovide a distributed UNIX 
operating system 



Extends the standard UNIX 
protection model vvitli compati- 
ble Access C>ontrol Lists for im- 
proved granularity and seciuity 
Enables users, through 
improved system administra- 
tion capabilities, to reduce the 
effort required to maintain a 
large, integrated network of 
independent systems 
Provides support in several key 
areas for internationalization, or 
native language extensions 
Supports a complete communi- 
cation product set that pro- 
motes the sharing of piograms 
and data in a heterogeneous 
computing environment 
Incorporates a superior 
prcjgramming environment, 
consisting of programming 
languages and CASE tools 
(including a new cjbjecl- 
oriented, user-extensible dis- 
tributed debugger), that short- 
ens development life-cycle while 
improving software quality 
Provides compiler support for 
the UNIX Common Object File 
Format (COFF) standard, offer- 
ing a high degree of compatibil- 
ity and portability for software 
tools and compilers 
Supports an online, interactive 
help facility 

Flexible Architecture 

Apollo's object-oriented opei- 
ating system, Domain/OS, is 
designed to be easy to maintain, 
easy to customize, and easy to 
modify. Object orientation, 
based on the concepts of data 
abstraction and modularity, lets 



users define cone eptual objects 
as software objects. Objects can 
f)e devices, special data struc- 
tures, or standard ASCII files. A 
software ol)jcct includes all the 
software associated with manip- 
ulating the de\ ice or data (for 
example, operations such as 
open, close, read, write) plus the 
device or data itself. The flexi- 
bility and modularity of oliject 
orientation allow the implemen- 
tation of objects to be changed 
or replaced without affecting 
other parts of the code. Under 
Domain/OS, users can redefine 
or extend traditional kernel 
functionality without modifying 
the kernel source code. 

The UNIX System V Release 
3 and 4.3BSI) kernels were origi- 
nally built on the design center, 
or computing concept, of a 
departmental timesharing sys- 
tem. Force fitting these kernels 
into a workstation architecture 
would have resulted in a net- 
work of sovereign, isolated 
timesharing systems costly to 
administer and lacking in 
important file and data sharing 
capabilities. Since y\ polio started 
out with a design center that 
stressed the importance of 
allowing a large number of dis- 
tributed workstations (e.g., up 
to 10, 00(1 nodes or more at a 
site) to be able to function and 
be managed as though they 
were a single system, Apollcj 
decided to build an operating 
system kernel that sup[)orted 
this design center while faith- 
fully adheiing to the UNIX 
kernel-level interfaces. The 
result is Domain/OS, a disti ib- 
uted UNIX operating system 
that is unecjualled in the indus- 
try for network computing. 



The kernel of Domain/OS 
(the Domain Nucleus) is smaller 
than most modern UNIX ker- 
nels. It is designed so that only 
absolutely necessary functions 
are in the kernel. All other 
functions usually found in the 
kernel, such as the device- 
independent I/O subsystem, 
user-developed device drivers, 
and Berkeley sockets, as well as 
system subroutines, are stored 
in global shared libraries to 
which programs are dynami- 
cally linked, automatically, at 
execution time. These libraries 
store most of the program-level 
interfaces of Domain/OS. Fhis 
results in smaller object ukxI- 
ules, more usable disk space, 
better paging behavicjr, and 
shorter compile/test cycles. This 
approach also helps produce a 
more robust and reliable kernel 
by minimizing the amount of 
code that can cause a serious 
system failure, and provides all 
of the advantages olOpenness. 
For example, Ijecause device 
drivers (represented as objects 
in the operating system) run 
outside the nucleus, users can 
easily write and debug device 
drivers using standard language 
debuggers. With portions of the 
I/O system outside the nucleus, 
users can make major exten- 
sions to the I/O subsystem using 
Apollo's Open System Toolkit." 
There is no need to rebuild 
and debug the kernel. A similar 
architectural approach is being 
taken in modern operating 
system research efforts at uni- 
versities like Cjarnegie Mellon 



The new Domain/OS 
Debugger is a powerful 
distributed computing 
object-oriented, user- 
extensible debugger built 
on the NCS architecture. 
It enhances Apollo 's 
environment through its 
support of multiprocess 
applications. 



With Domaiii/OS, there is 
also a new release and installa- 
tion to(jl set which allows the 
system administrator wide lati- 
tude in configuring software 
both on the network and on 
individual nodes. The adminis- 
trator can tailor installation 
procedines easily and set up 
network defaults, including 
pre-selecting and/or limiting 
options available for installation 
on the network. Scjftware can 
he configured for both large 
and small disks; and heavily 
used files can be installed 
locally while others can be 
installed \ia links to file servers. 
In addition, soitwaie installa- 
tion can be peribrmed at an 
individual node by either pull- 
ing from the authorized install 
area or by pushing lo multiple 
target nodes simultaneously. 

Native Language Support 

Ap(jllo has taken a number of 
steps toward providing full suji- 
port foi' multiple international 
character .sets. The Domain/OS 
kernel supports the IS(J Lalin-1 
character set, an 8-bit character 
set that integrates all the popu- 
lar European characters into 
Apollo's standard fonts. This 
means that users can name files 
and other environment objects 
using their own native lan- 
guage. The System V Bourne 
and Korn shells and the Aegis 
shell all support 8-bit characters 
for input and output. Apollo 
also provides an advanced edi- 
tor, integrated into the window 
system, that can edit and display 
text in a user's native language. 
In addition, the print subsystem 
has been designed to print 8-bit 
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characters. Native language 
support includes: Danish, 
Dutch, Knglish, Facroese, Finn- 
ish, French, (lerman, Icelandic, 
Irish, Italian, Norwegian, Portu- 
guese, Spanish, and Swedish. 

Communications Capabilities 

Domain/OS sup]X)rts a wide 
range of indu.stry and dcfacio 
standard communications prod- 
ucts for both homogeneous and 
heterogeneous networks. A sin- 
gle version of TCIFVI P, accessible 
Irom all three environments, 
is integrated in I)omain/().S. Flie 
liSf) and SysVenviionments 
als(j access a single version of 
the HoneyDanBer uucp. 

Optifjiial communications 
products include Ethernet '; 
Domain/ Access™ for file access 
to DKC VAX/VMS" systems; 
NFS'" ; VTIOO" terminal emula- 
tion; IBM SNA, LU 6.2, RjE and 
BLSYNC; for communications 
with IBM host systems; Domain/ 
PC:i '" t(j extend Apollo worLsta- 
tion capabilities to PC users; 
and X.2.5. 



Domain/OS also integrates 
comjjonents of Al'&l "s System V 
Release ;5 Netw(jrk Ser\'ices 
Extensions. These components, 
S I RF.AMS and Fransporl Level 
Interface CILl), ])ro\icle standard 
interfaces to ensure portability 
of netwcjrking applications. By 
using these .services, users can 
write applications thai are incle- 
})endent of underlying protocols 
and, therefore, portable to any 
compatible network. 
Programmer's Environment 
Apollo offers a rich comple- 
ment of languages and CASK 
tools to provide the most 
advanced software develop- 
ment envircjiiment in the 
industry. L^omain/OS suppcjrts 
the languages Domain/Cl (with 
new features such as function 
prototypes and ccjnipile-tinie 
type checking, C: ++ reference 
variables, and informational 
messages in addition to warn- 
ing and error messages). 



University (MACH project) 
and University of C^alifornia- 
Berkeley (Sprite). 

Domain/OS provides the 
standard UNIX I/O interiaces- 
open, close, read, write, seek. 
However, the underlying imple- 
mentation of hie I/O is unique 
in that both disk and network 
I/O are achieved through 
demand paging. The file I/O 
manager is simply a set of rou- 
tines that map file pages into 
the virtual memory of a process. 
When a program attempts to 
retrieve data not in real mem- 
ory, a page fault occurs. The lay- 
ering of the file I/O manager on 
top of the paging system makes 
more efficient use of physical 
memory by allowing all of it 
to be available as a cache over 
the file system. Domain/OS 
also allows direct access to the 
mapped file interface lor appli- 
cations that need the maximum 
possible I/O tliroughput. In 
addition, the system uses the 
same mapping and demand 
paging mechanism for pro- 
gram execution itself. Bet:ause 
demand paging operates trans- 
parently aci'oss the network as 
well as from a local disk, the sys- 
tem is able to support program 
execution on nodes with or 
without disks. 

The flexibility of Apollo's 
system architecture allows 
Domain/OS to support three 
environments: SysV, BSD, and 
Aegis. The SysV environment, 
based on AT&T's System V 
Release 3, is SVID-compliant 
and on the migration path to 



become POSIX- compliant. 
Included in the SysV environ- 
ment are the UNIX Bourne, C, 
and Korn shells. The BSD envi- 
ronment, based on the latest 
release of 4.3BSD, provides 
complete Berkeley functionality 
through the C, Bourne, and 
Korn shells. The Aegis environ- 
ment has its own Aegis shell. 

Network Computing-based 
Distributed UNIX 

Domain/OS is the first truly dis- 
tributed UNIX operating sy.s- 
tem, providing transparent file 
sharing, automatic concurrency 
control, supjiort for large net- 
works, and easy additions of 
both disked and diskless nodes. 
Domain/OS also implements 
a distributed registry, remote 
debugger and network print 
manager all ba.sed on Apollo's 
Network Computing System 
architecture, thereby providing 
a distributed operating system 
in a heterogeneous computing 
environment. 

The distributed registry sup- 
ports both verv large networks 
and networks of different 
machines. The remote debug- 
ger supports multiprocess dis- 
tributed applications, "fhe 
network print manager coordi- 
nates print requests with net- 
work print resources. It afso 
supports a set of tools that lets 
users customize the user inter- 
face and extend the print .server 
to support additional printers. 

The capabilities of Domain/OS 
dramatically reduce the cost of 
owning a network of distributed 
wot kstations. System administra- 
tion is much simpler and less 
time consuming because the .sy.s- 



tem automatically mounts files, 
piTjtects files and data from 
being lost or corrupted and dis- 
seminates information on users 
and passwords to all computers 
in the network. For the first time, 
users can harness all the c apa- 
bilities of a tightly integrated 
network to distribute data, 
files and computing power. 
Domain/OS allows any network, 
whether it has 2 nodes or 2()()() 
nodes or more, to project a 
single-system image to users. 

UNIX Extensions 

Apollo supports existing stan- 
dards and provides technologi- 
cal advances in the form of 
compatible extensions to those 
standards. Two such extensions 
take the form of Access C^ontrol 
Lists and a new directory called 
/usr/apollo/liin. 

Domain/OS directly imple- 
ments the UNIX file protection 
model. The LINIX operating 
system provides a file protection 
system that divides the world 
into the file owner ("user"), indi- 
viduals in the same group 
("group"), and the rest of the 
world ("other"). Permissions 
include read, write, and exe- 
cute. This security system has an 
advantage in that it is simple to 
understand and, for many envi- 
ronments, provides adec]uate 
security. 

However, the standard UNIX 
protection system is inflexible 
and inadequate in large net- 
works of many users and where 
tighter security is required. The 
UNIX model falls down when 



the) e is a need to give a specific 
individual certain file access 
(either more or less than others 
in the group or world), or when 
there is a need to restrict access 
to a tile so that it can be accessed 
only Ironi a specific node, or 
when there is a need lor another 
level oi delineation between 
group and other (for example, 
one that corresponds to a proj- 
ect team or an organization). 

Apollo's solution to the limita- 
tions of the UNIX model was to 
implement an extension lo it in 
the form of Access Control Lists 
(ACLs). ACLs are lists of access 
lights that are attached to files. 
To determine the rights of an 
individual to a file, the o]3eiat- 
ing system simply searches 
down the list for the first entry 
that applies. Entries can be 
made that explicitly allow or dis- 
allow access rights foi' specific 
individuals. An ol:)ject can be 
protected so that it can be 
accessed only from the local 
node, without restricting the 
availability across the network 
of otlier objects on the same 
disk. In addition, AClLs support 
a fourth grouping level, called 
organization, that provides 
granularity fjeyond the stan- 
dard UNIX owner, group, and 
world. The availability of AtTs 
provides u.sers a choice. When 
standard protections are impor- 
tant, users can choo.se the stan- 
dard UNIX protection system. 
When greater granularity and 
security are required, users can 
take advantage of the extended 
ACLs. 



A second im]jortant exten- 
sion to the standard UNIX 
implementation is the develop- 
ment of over 50 utilities that en- 
hance the productivity of UNIX 
users in a distriljuted environ- 
ment. These utilities include 
network status and nianagemenl 
commands, backup and other 
system administration com- 
mands, and commands which 
support the Open System Tool- 
kit and Apollo's Access Control 
List extensions. They are stored 
in the new /usr/apollo/tjin direc- 
tory to distinguish them from 
standard UNIX utilities. LIscrs 
who need the extra functionality 
can choose to use these fac ilities. 

Easy, Network-wide System 
Administration 

Becau.se Apollo builds its sys- 
tems and networks for work- 
group computing, Apollo ba.ses 
its designs on the concept that 
"the default is to share" data 
and files and resources across 
the network. Domain/OS there- 
fore provides and supports 
capai)ilities such as completely 
transparent file sharing, auto- 
matic concurrency control, 
dynamic re-configuration of 
diskless nodes (no need to cre- 
ate disk partitions), simple addi- 
tion of new nodes using one 
command (no need for mount 
or umouni on each node in tfie 
network), dynamic allocation of 
paging space, and global shared 
libraries. All these capabilities 
simplify tfie life of a system 
administrator by eliminating 
routine tasks. 

In addition, to make system 
administration easier and to 
reduce seciuity risks, there is a 



single password system, or reg- 
istry. The Domain/OS registry 
consists of a datal)a.se of naming 
and account information and 
a server tfiat manages changes 
to the data and propagates 
updated information. The reg- 
istry, implemented using the 
Network Computing System, 
is a distributed system which 
allows excellent support for 
both very large networks and 
networks of different machines. 
The registry can be replicated; 
that is, there can be more than 
one copy of the database/server 
comliination residing on dif- 
ferent nodes in the network. 
Domains of control in tfie reois- 

o 

try can lie established, if desired, 
by assigning the ownership of 
groups and organizations in the 
registry database. This flexiljil- 
ity allows system administrators 
to separate the administration 
of finance accounts, for exam- 
ple, from the administration of 
R&D accounts. Registry infor- 
mation is manipulated by the 
registry owner(s) only, using a 
single tool, the cdrgy command. 
Read-only versions of the UNIX 
/etc/passwd and /etc/group files, 
which contain user account and 
group information, automati- 
cally reflect the current contents 
of the registry. They are not 
directly editable because an 
editable ,ASC;iI file of user 
account information is piTJtie to 
error and represents a security 
risk in a distrifjuted environ- 
ment. Import and export of 
/etcypasswd files are possible to 
and from non-ApoUcj systems, 
to simplify administration of 
heterogeneous networks. 
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FORTRAN 77 (with f77 support 
and the C:C)Mr>[.F.X*l(i data type), 
Pascal, Domain/CloininonlJ.SP!" 
and Domain/Ada." By default, 
Domain/OS compilers generate 
absolute code for high perfoi- 
manc c ol user applications, while 
retaining the ability to gcnciate 
position independent code. 

Apollo's C-ASE tools support 
Apollo's life cycle apprcjach to 
(;ASF.. Fioni initial product con- 
cept and design, to coding and 
testing, till ough tuning, i elease 
and maintenance, Apcjilo offers 
powerful software tools to make 
.sof twaie development faster 
and more productive. 

Ihe new Domain/OS Debuggei 
is a powerful object-oriented, 
u.ser-extensible debugger built 
on the NCIS aichitecture. It en- 
hances Apollo's distributed com- 
puting environment through its 
sujjport of multiprocess appli- 
cations. It provides all the Fea- 
tures of Domain/Dcfjug " pfus 
an extcnsixc otTcriiig of Hew 
features. Furthermore, the 
Debugger supports all the fea- 
tures available in dbx, the LhNIX 
debugger, and provides a mode 
that accepts dbx command syn- 
tax. In addition it supports pro- 
grams wiitteii in C, FORI RA.N 
77. and Pascal, or any combina- 
tion thereof. 

The Domain Softwaie Engi- 
neering Environment (DSEE ") 
offers unequaled support for 
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complex, team-oriented ]3roj- 
e( ts because it was specifically 
designed to take full advantage 
of Apollo's distributed network- 
ing and computing capabilities, 
f he Domain Perlormance 
Analysis Kit (Domain/FAK ") 
gives u.seis a multilevel graphi- 
cal piofiler lot complete perfoi- 
mance testing and analysis. 

Domain/ Delphi Documentation 
Retrieval System 

Domain/OS incorporates man- 
ual pages f(jr the SysV, t^SL), 
and Aegis environments. In 
addition, it supports the 
Domain/Delphi documenta- 
tion retrieval system, a new 
optional advanced online sys- 
tem for Apollo documentation. 
Hai clcopy pages are displayed 
online with atlractixe fonts and 
graphics, identical to tlie coi le- 
sponding printed manual. An 
easy-to-use mouse-driven inter- 
face with a imiversal "quick- 
help" facility makes interacting 
witfi Domain/Delphi as simple 
as point and click. 

With Domain/Delphi, users 
can perform both hierarchical 
bi owsing thiough a global 
'table of contents" and pet son- 
all) tailored keyword searches. 
Seat dies can be limited to cover 
only those Ijooks which aie rele- 
vant. Domain/Delphi also lets 
usei s create personal Reference 
Lists of f rec]uentfy irsecf docu- 
ments to pnjvide direct access 
to needed information. Search 
constraint preferences and 
Reference Lists are maintained 
from session to session. 

Domain/Delphi runs in its 
own process and window, which 
means that documents can be 



retrieved without interrupting 
ongoing work in other pro- 
cesses and windows. Apollo's 
network environment allows 
hundreds of users to share 
Domain/Delphi data residing 
on a single host node. 
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